Static task
static1
Behavioral task
behavioral1
Sample
e910ccd8a1a0f9caa61d18b22e9407ff_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e910ccd8a1a0f9caa61d18b22e9407ff_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e910ccd8a1a0f9caa61d18b22e9407ff_JaffaCakes118
-
Size
516KB
-
MD5
e910ccd8a1a0f9caa61d18b22e9407ff
-
SHA1
2f78f3b19b4f30a9ec2e2a61c47510dea8a317db
-
SHA256
e73adb7dc190ef9ca7791f52d28ec27b7900efe861917bacd08ad719f2a1e4e7
-
SHA512
05bffcd20ef9f4d1b1cc1479e9bbc9aec106647132c8a3463bc817fee1e93468b972b3345e13e851809b8a2310002148fadcfd45fe8af1ce3640bace3ab84c09
-
SSDEEP
12288:Mb16uxnRk1JyckPkkLoneu1aKByKJ4OW8QSECZJC:f15kPk6oerWeZ8QS9Zs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e910ccd8a1a0f9caa61d18b22e9407ff_JaffaCakes118
Files
-
e910ccd8a1a0f9caa61d18b22e9407ff_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 52KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 424KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bandit Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE